Security Directory

S

Santillana

santillanaeducacao.com.br

64

Santillana is a well-established educational content provider operating primarily in Brazil. The website presents educational services and digital learning platforms targeting students, educators, and schools. The company leverages modern web technologies and tracking tools to optimize user experience and marketing efforts. The site is hosted on Amazon AWS infrastructure, indicating a robust hosting environment. Privacy compliance is addressed with a linked privacy policy that aligns with GDPR standards, and a consent management platform is implemented to handle cookie preferences. However, explicit contact information and detailed security policies are not prominently available on the homepage, which could be improved to enhance transparency and trust. Overall, the website demonstrates a solid technical foundation with good security posture and compliance practices.

Muzeum Tupeské keramiky is a small local museum located in Tupesy, Czech Republic, dedicated to the history and production of traditional and modern majolica ceramics. The museum offers exhibitions, workshops, school excursions, and a retail shop selling local ceramic products. The website provides basic information about the museum's offerings and cultural significance but lacks detailed contact information and formal privacy or security policies. Technically, the site uses older web technologies such as jQuery 1.x loaded over HTTP, which introduces mixed content risks. There is no evidence of HTTPS enforcement or modern security headers, which impacts the overall security posture. The absence of WHOIS data for the domain reduces trust in domain legitimacy, although the website content appears genuine and focused on cultural heritage. Overall, the site serves its informational purpose but requires improvements in security, privacy compliance, and technical modernization.

The website tralandia.cz is currently a parked domain with placeholder content indicating it may be for sale. There is no active business presence or services offered on the site. The domain was registered recently in 2022 and uses parkingcrew.net name servers, consistent with domain parking services. The site heavily relies on advertising scripts from Google Adsense and Youseasky, with no user-facing content or navigation beyond the parked domain message. Technically, the site uses standard HTML and JavaScript with CDN hosting via Cloudfront, but lacks modern security headers and HTTPS enforcement visible in the HTML content. Privacy compliance is minimal, with only a basic privacy policy accessible via a popup link and no cookie consent mechanism. No contact or business information is provided, reducing trust and business credibility. Overall, the site is low quality, low trust, and serves primarily as a domain parking landing page.

Česká alzheimerovská společnost, o.p.s. (ČALS) is a Czech non-profit organization established in 1997 dedicated to supporting people with dementia and their caregivers. The organization offers educational programs, certification, publications, and events to raise awareness and provide assistance. The website reflects a professional and consistent brand presence targeting patients, families, healthcare professionals, and donors. Technically, the site is built on Vizus CMS, uses Google Analytics for traffic measurement, and implements a cookie consent mechanism with granular controls. However, the absence of a privacy policy and terms of service pages, as well as missing WHOIS data, slightly reduce trustworthiness from a compliance and domain legitimacy perspective. Security posture is moderate with HTTPS enabled but lacking security headers and incident response information. Overall, the site is well-designed, accessible, and content-rich, serving its non-profit mission effectively.

E

EnviWeb s.r.o.

enviweb.eu

55

EnviWeb s.r.o. is a specialized public relations agency focused on environmental topics, ecology, and sustainability primarily serving clients in the Czech Republic. The company manages notable environmental projects such as Ukliďme Česko, Kam s ním?, and EKOkalendář, positioning itself as a niche leader in environmental communication. Their business model centers on providing comprehensive PR services including media relations, brand building, and content creation tailored to environmental and sustainability sectors. The website is built on a modern React and Next.js framework, indicating a contemporary technical infrastructure with good mobile optimization and user experience. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which are areas for improvement in compliance and security posture. The domain WHOIS data is privacy protected by EURid, which is typical for EU domains, and no suspicious patterns were detected, supporting the legitimacy of the business. Overall, the website presents a professional and trustworthy image with moderate technical and security maturity.

N

nevajgluj.cz |

nevajgluj.cz

46

The website nevajgluj.cz is a small-scale, relatively new website registered in 2022 under the Active24 registrar, hosted on servers with websupport.cz name servers. The site uses WordPress CMS with the Divi theme and loads Google Fonts for typography. The content is minimal and primarily technical, with no visible business descriptions, contact information, or detailed service offerings. The cookie policy is present with a consent mechanism, but no privacy policy or terms of service were found. No security headers or advanced security policies are detected, indicating a basic security posture. The site does not appear to use analytics or tracking services, and no social media or contact details are provided. Overall, the website appears to be in an early stage or possibly a personal or small business site with limited digital maturity and security measures.

T

Tomáš – platforma pro budoucnost podnikání

to-mas.cz

42

The website to-mas.cz is a newly launched business platform (established in 2023) aimed at helping entrepreneurs and business owners advance their ventures. It offers services such as a contact database, free online courses, and a grant search engine. The platform is built using modern web technologies including Nuxt.js and Bootstrap, and integrates Google Tag Manager for analytics purposes. The site demonstrates good design quality, mobile optimization, and clear navigation, making it user-friendly for its target audience. However, it lacks visible privacy and cookie policies, contact information, and explicit security policies, which are critical for compliance and trust. The domain registration is consistent and legitimate, matching the hosting provider Active24, indicating a credible business launch. Overall, the website shows promise but requires improvements in privacy compliance and security posture to enhance trust and regulatory adherence.

深圳市达妙科技有限公司是一家成立于2019年的中国科技公司，专注于智能电机及驱动解决方案，产品广泛应用于机器人及自动化领域。公司提供多款关节电机、轮毂电机及开发套件，面向机器人制造商和科技竞赛团队，拥有一定的市场认可度。技术基础包括使用主流前端库和自建CMS，网站设计专业且移动优化良好。安全方面，网站缺乏HTTPS支持和安全头，且未发现隐私政策或安全事件响应机制，存在一定安全风险。WHOIS信息缺失，域名注册状态不明，影响整体信任度。建议尽快部署HTTPS，完善隐私合规和安全策略，提升整体安全与合规水平。

S

shen zhen shi gong zhi yi ke ji you xian gong si

evercraft.co

44

EverCraft is a Chinese technology company specializing in engineering productivity tools, including version control software and online CAD visualization platforms. The company targets engineers and professionals requiring efficient file history management and CAD collaboration tools. Their product suite includes 追光Lite for file versioning, 追光看图 for CAD viewing and annotation, and 分形三维 for 3D CAD visualization. The company operates primarily in China, with hosting and domain registration consistent with local regulations and ICP licensing. Technically, the website is built using modern web technologies such as React and Next.js, hosted on Alibaba Cloud. The site is mobile-optimized and performs moderately well, though accessibility and SEO optimizations are basic. The site uses Baidu Analytics for user tracking but lacks visible cookie consent mechanisms or privacy policies, indicating room for improvement in privacy compliance. From a security perspective, the site uses HTTPS but lacks important security headers and DNSSEC is not enabled. No forms or sensitive data collection points were detected on the homepage, reducing immediate risk. However, the absence of published security policies, incident response contacts, and vulnerability disclosure mechanisms suggests a low maturity in security governance. Overall, the website is professional and trustworthy within its niche but would benefit from enhanced privacy compliance, security hardening, and clearer contact information to improve user trust and regulatory adherence.

S

Sdružení Krajina

stopavkrajine.cz

45

Sdružení Krajina is a Czech non-profit organization dedicated to nature conservation and landscape management. Their website showcases various projects such as mowing wet meadows, restoring natural watercourses, and educational initiatives. The organization engages volunteers and local communities to preserve natural habitats. Technically, the website uses modern web technologies including Google Tag Manager, reCAPTCHA v3, Leaflet maps, and is likely powered by Perch CMS. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, HTTPS is used and reCAPTCHA protects forms, but explicit security headers and privacy policies are missing, indicating room for improvement. WHOIS data is unavailable, likely due to privacy protection, which is common for non-profits. Overall, the website is legitimate, informative, and safe, but could enhance compliance and security transparency.

C

Charita Česká republika

caritas.cz

56

Charita Česká republika is a well-established non-profit organization operating in the Czech Republic, providing the largest network of non-governmental social and health services in the country. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. It serves a broad audience including beneficiaries, donors, volunteers, and partners. The organization emphasizes humanitarian aid, social services, and advocacy, positioning itself as a key player in the Czech non-profit sector. Technically, the website employs modern web technologies including JavaScript frameworks, Google Fonts, and a consent management platform to ensure compliance with privacy regulations. Analytics tools such as Google Analytics and Facebook Pixel are used for user tracking and marketing insights. The site is mobile-optimized and accessible, with good SEO practices. From a security perspective, the site uses HTTPS and implements several security headers, indicating a good baseline security posture. However, the absence of a public security policy and incident response contact information suggests room for improvement in transparency and readiness. The lack of WHOIS data reduces trust slightly but is mitigated by the professional presentation and partner affiliations. Overall, the website is trustworthy, professional, and compliant with privacy standards, with recommendations to enhance security transparency and domain registration visibility.

T

TSC Group

renatex.cz

53

TSC Group is a large holding company based in the Czech Republic, specializing in facility management, industrial and healthcare cleaning, laundry services, technological cleaning, and paint stripping. The company operates through 12 subsidiaries, serving diverse sectors including industrial manufacturing, healthcare, administrative offices, and outdoor maintenance. Their market position is strong as the largest group in their sector within the Czech Republic, leveraging modern technologies and certifications such as ISO 50001 and EcoVadis to maintain competitive advantage. Technically, the website employs modern web technologies including Google Tag Manager, Swiper.js for UI components, and the Nette Framework for backend form validation. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Performance is moderate with asynchronous loading of scripts and responsive design. From a security perspective, the site uses HTTPS with good SSL configuration and secure form handling including reCaptcha. However, there is a lack of explicit security headers and no published security or incident response policies, which could be improved. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website is trustworthy, professional, and compliant with GDPR, featuring cookie consent mechanisms and privacy policies. The absence of WHOIS data is likely due to privacy protection and does not detract from the legitimacy of the business. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to further strengthen trust and compliance.

L

Letterjuice

letterjuice.cat

54

Letterjuice is a small, specialized type foundry based in Spain, founded in 2013. The company focuses on type design and lettering across multiple scripts including Latin, Arabic, Greek, Cyrillic, Hebrew, and Thai. Their market position is niche, targeting designers, typographers, and educators interested in multilingual typography. The website is professionally designed with good content quality and clear navigation, supporting their business model of selling typefaces and custom lettering services. Technically, the site uses modern JavaScript libraries such as jQuery and GSAP, and is hosted by Arsys. Performance and mobile optimization are good, though accessibility is basic. Security posture is moderate with HTTPS enabled but lacking DNSSEC and security headers. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the domain registration data aligns well with the business profile, indicating legitimacy and trustworthiness.

R

Radek Łukasiewicz

radluka.com

56

RadLuka is a small-scale font foundry website operated by Radek Łukasiewicz, offering a curated collection of unique fonts and lettering services targeted at designers and creative professionals. The website is professionally designed using Webflow and integrates modern font management technologies such as fontdue. The business model centers on e-commerce sales of font licenses with free trial options, positioning itself as a niche player in the typography market. Technically, the site leverages Webflow CMS and CDN hosting, with JavaScript libraries including jQuery and fontdue for font rendering and cart functionality. The website performs well with good mobile optimization and clear navigation, though accessibility and SEO optimizations are basic. No advanced analytics or tracking tools are detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS but lacks visible security headers and cookie consent mechanisms, which are recommended for GDPR compliance. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, impacting overall trust. No vulnerabilities or exposed sensitive data were found, but publishing security policies and incident response information would strengthen security posture. Overall, RadLuka presents a professional and focused online presence for font sales but should improve domain registration transparency, security headers, and privacy compliance to enhance trust and security maturity.

I

Interledger Foundation

webmonetization.org

61

The website webmonetization.org is operated by the Interledger Foundation and serves as the official hub for the Web Monetization API, a technology standard enabling websites to receive payments automatically from visitors. Positioned as an innovator within the web standards community, the site targets developers, content creators, and organizations interested in integrating micropayments into web experiences. The business model revolves around promoting an open, interoperable protocol leveraging the Interledger payment system. Technically, the site is built with modern frameworks such as Astro, optimized for performance, mobile responsiveness, and accessibility. It uses Cloudflare DNS and minimal external dependencies, with a clean, professional design and clear navigation. Security posture is solid with HTTPS enforced and no exposed sensitive data, though some security headers and formal policies are absent. Privacy compliance is strong, with comprehensive policies hosted via Iubenda. Overall, the site is trustworthy, professional, and well-aligned with its stated mission.

I

Interledger Foundation

interledger.org

62

The Interledger Foundation is a US-based nonprofit organization founded in 2015 that leads the development and stewardship of the Interledger protocol, an open-source technology enabling interoperability between diverse financial systems globally. The foundation focuses on grantmaking, community building, and advancing open financial standards to foster financial inclusion and economic opportunity worldwide. The website reflects a professional, well-branded presence with comprehensive content targeting fintech startups, remittance users, small businesses, and gig workers. Technically, the site is built on Drupal 10, uses Cloudflare for DNS, and employs modern web standards with good mobile optimization and accessibility. Analytics are handled via Umami, indicating a privacy-conscious approach with minimal user tracking. However, DNSSEC is not enabled, and some security headers are missing, representing areas for improvement. Security posture is solid with HTTPS enforced and domain registration consistent with the foundation's identity. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with a clear privacy policy and terms of service, though no explicit cookie consent mechanism was found. Contact is available via a form but no direct emails or phone numbers are published. Overall, the website is trustworthy, professional, and well-aligned with the foundation's mission. Strategic recommendations include enabling DNSSEC, adding security headers, publishing incident response and vulnerability disclosure policies, and implementing cookie consent to enhance compliance and security transparency.

H

Hoermann

hoermann-akademie.com

62

Hoermann-Akademie is an educational platform affiliated with the Hoermann brand, providing training and knowledge resources primarily targeting professionals and learners in Germany. The website uses modern web technologies including Vue.js, Bootstrap 5, and Kendo UI, indicating a moderate level of digital maturity. The site is mobile optimized and moderately performant but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is legitimate and professionally branded but could improve in privacy and security practices to better align with GDPR and industry standards.

K

Karriere im Familienunternehmen

karriere-familienunternehmen.de

55

The website 'Karriere im Familienunternehmen' serves as a specialized job board and information portal targeting job seekers interested in careers within leading German family-owned companies. It offers thousands of job listings and career-related content tailored to this niche market segment. The site positions itself as a trusted platform for connecting candidates with family businesses in Germany, leveraging a focused business model centered on employment opportunities and employer branding within this sector. Technically, the website is built on the Drupal CMS platform, utilizing standard web technologies such as HTML5, CSS3, JavaScript, and Font Awesome icons. It integrates Google Analytics for user tracking and employs Cookiebot for cookie consent management, indicating a moderate level of digital maturity. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. From a security perspective, the website enforces HTTPS, ensuring encrypted communication. However, it lacks several recommended security headers such as Content-Security-Policy and X-Frame-Options, which could enhance protection against common web attacks. No vulnerability disclosure or incident response information is provided, and no privacy or cookie policies were detected in the analyzed content, which may raise compliance concerns under GDPR. Overall, the website presents a professional and trustworthy front for its business niche but would benefit from enhanced privacy compliance and security hardening. Strategic improvements in these areas would strengthen user trust and regulatory adherence.

W

WebP to PNG Converter Online

webptopngonline.com

39

The website www.webptopngonline.com offers a free online service for converting WebP images to PNG format, along with other related image format conversion tools such as WebP to JPG, JPG to WebP, and PNG to WebP. It targets web users, developers, and designers who require quick and easy image format conversions. The business model appears to be based on providing free utility services, likely monetized through advertising and traffic. The site is small in scale and focused on a niche utility function within the technology sector. Technically, the website employs a modern frontend stack including HTML5, CSS3, JavaScript, jQuery, Bootstrap, and various UI libraries such as Owl Carousel and SlickNav. It uses HTTPS and includes basic SEO and mobile optimization features. However, accessibility features are basic, and no CMS or hosting provider information is evident. Performance is moderate, with room for improvement in security headers and compliance features. From a security perspective, the site uses HTTPS but lacks visible security headers such as Content-Security-Policy or HSTS. There is no evidence of privacy or cookie policies, vulnerability disclosure, or incident response contacts, which are important for compliance and trust. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy and ownership transparency. No adult or questionable content is present, and the site is safe for general audiences. Overall, the website is functional and provides a useful service but has gaps in privacy compliance, security best practices, and domain registration transparency. These issues reduce trustworthiness and could impact user confidence. Strategic improvements in these areas would enhance the site's credibility and security posture.

S

Study Perks

studyperks.com

62

Study Perks is a niche content website focused on providing college students with curated discounts and financial advice. The site operates primarily through content and affiliate marketing, targeting the student demographic with relevant deals and informational articles. The business appears to be small and specialized, with a consistent brand presence and active social media channels. Technically, the site is built on WordPress with common plugins for SEO and analytics, hosted behind Cloudflare DNS but lacking DNSSEC. Performance and mobile optimization are adequate, though some accessibility features are basic. Security posture is moderate with HTTPS enforced and cookie consent mechanisms in place, but missing some security headers and DNSSEC. Privacy compliance is basic with a privacy policy and cookie consent but no terms of service or security policy pages. Overall, the site is legitimate and trustworthy but could improve in security and contact transparency.

C

Coin Debug

nightfxtrading.com

58

Nightfxtrading.com operates as an educational blog under the brand 'Coin Debug', focusing on cryptocurrency trading bots, altcoin trading strategies, and AI applications in crypto markets. The website provides a series of well-structured articles aimed at crypto traders interested in automating their trading processes and improving bot performance. Technically, the site is built on WordPress with Yoast SEO plugin, hosted behind Cloudflare DNS, and uses modern web standards with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal policies. The absence of privacy, cookie, and terms of service policies, along with no contact or incident response information, reduces compliance and trust. WHOIS data is inconsistent, showing a future domain creation date and registrant as a registrar company, which raises legitimacy concerns. Overall, the site is accessible, content-rich, and technically sound but requires improvements in compliance, transparency, and security best practices.

The analyzed URL corresponds to a Chrome internal error page (chrome-error://chromewebdata/) which is not a publicly accessible website. It serves as an offline or error display within the Chrome browser, including embedded scripts for the Chrome Dino game. No business or organizational information is present, and the page lacks any metadata, privacy policies, or contact details. The technical infrastructure is minimal and specific to Chromium's internal resources, with no external hosting or CMS detected. Security posture is limited due to the nature of the page, with no HTTPS or security headers applicable. Overall, this page is not a commercial or organizational website and cannot be evaluated for business credibility or compliance.

L

Lehnen Websolutions GmbH & Co. KG

resavio.com

49

RESAVIO is a German-based company offering a comprehensive cloud-based hotel management software suite that integrates property management, channel management, online booking, and digital guest services. The company targets a broad range of accommodation providers including hotels, pensions, hostels, holiday apartments, and camping sites. With over 15 years of experience, RESAVIO positions itself as a trusted solution for direct booking optimization and online distribution. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content to its target audience. Technically, the website uses modern web technologies with a custom-built platform, ensuring good performance and mobile responsiveness. Security is well addressed with HTTPS and CSRF protection, though some advanced security headers and explicit security policies are not publicly visible. Privacy compliance is strong, with comprehensive privacy and cookie policies and a consent mechanism in place. The security posture is solid with no visible vulnerabilities or exposed sensitive data. The domain registration data aligns well with the business claims, enhancing trustworthiness. Social media presence and client testimonials further reinforce credibility. Overall, the website and business demonstrate a mature digital presence with good security and privacy practices. Strategically, RESAVIO should consider publishing explicit security policies and incident response contacts, enhancing security headers, and possibly adding a security.txt file to improve transparency and vulnerability management. These steps would further strengthen trust and compliance in the hospitality software market.

S

Scriby Inc.

wall.love

64

Progressier, operated by Scriby Inc., is a technology company specializing in Progressive Web App (PWA) toolkits, with a focus on aggregating app reviews and testimonials into a branded Wall of Love. The platform targets web developers and no-code makers, offering seamless integration and customization features. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence for a company founded in 2022. Technically, the site leverages modern web standards, third-party services like Intercom for customer engagement, and is hosted on Google Cloud infrastructure, ensuring good performance and reliability. Security posture is solid with HTTPS enforcement and domain transfer protections, though explicit security headers and policies could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. Overall, the site demonstrates a high level of professionalism and trustworthiness, suitable for its SaaS business model.

M

MAS Slavkovské bojiště, z.s.

spolubezhranic.cz

45

Spolu bez hranic is a Czech Republic based community platform operated by MAS Slavkovské bojiště, z.s., focused on connecting local sports and hobby clubs with residents. The website provides a directory of clubs with filtering by activity and location, linking to official municipal and club websites. The platform targets local community members interested in sports, cultural, and social activities, fostering engagement and social interaction. Technically, the site uses classic web technologies including HTML, CSS, JavaScript with jQuery 1.4 and Fancybox for UI enhancements. While the site is functional and mobile responsive to a basic degree, it uses an outdated jQuery version which poses security risks. Security posture is moderate with HTTPS enabled but lacks modern security headers and privacy policies. No analytics or tracking scripts are detected, indicating minimal user tracking. Business credibility is supported by clear contact pathways and consistent branding, though no direct emails or phone numbers are present on the main page. Overall, the site is a niche community service with good content quality but needs improvements in security and privacy compliance.

J

Jiří Hýbl - JAMI-COMP

bfp.cz

46

The website bfp.cz represents Jiří Hýbl - JAMI-COMP, a small Czech IT service provider specializing in Linux server management, network administration, webhosting, web application development, IT consulting, and cloud services. Additionally, the company offers photovoltaic plant management services, indicating a niche in energy optimization solutions. The business appears to be well-established, with a domain age dating back to 1997, supporting its credibility and market presence in the Czech Republic. Technically, the website is built with standard HTML, CSS, and JavaScript, featuring a clean and responsive design optimized for mobile devices. The site lacks advanced frameworks or CMS platforms, suggesting a simple but functional infrastructure. Performance is moderate, with basic SEO and accessibility features implemented. No analytics or tracking technologies were detected, indicating minimal user data collection. From a security perspective, the site does not display HTTPS status or security headers in the provided data, which is a concern. There are no published privacy, cookie, or terms of service policies, nor any incident response or vulnerability disclosure information. However, no exposed sensitive data or vulnerable libraries were found. The WHOIS data is consistent and legitimate, with no privacy protection masking registrant details, reinforcing trustworthiness. Overall, the website is professional and trustworthy for its business scope but requires improvements in security posture and privacy compliance to meet modern standards and regulatory requirements.

M

mcompanies.cz

mcompanies.cz

57

mcompanies.cz is a Czech Republic based medium-sized e-commerce and retail business specializing in the distribution and sale of sports equipment, including brands like SELECT and Looke. Established in 1993, the company holds a reputable market position as an official partner and supplier for Czech football leagues and other sports sectors. Their website is built on the Shoptet e-commerce platform, leveraging modern web technologies and standard marketing and analytics tools such as Google Analytics and SmartEmailing. Privacy and cookie compliance are well implemented, with clear contact information and customer support channels available. Security posture is good with HTTPS and security headers in place, though the absence of a public security policy and incident response details suggests room for improvement. The lack of WHOIS data limits domain trust verification, but overall the website and business appear professional and trustworthy.

M

McRent

mc-rent.es

54

McRent is a leading motorhome and camper rental provider operating primarily in Spain and across Europe, with over 120 rental stations. The company offers a wide range of new vehicles, unlimited mileage, comprehensive insurance, and additional equipment included in the rental price. Their website is professionally designed, multilingual, and optimized for user experience and SEO, reflecting a mature digital presence. Technically, the site leverages modern JavaScript frameworks such as React, integrates Mapbox for mapping, and uses Usercentrics for consent management, indicating compliance with privacy regulations. Security posture is strong with HTTPS enforced and secure payment integration, though some security headers could be improved. Overall, the business demonstrates high credibility with transparent contact information, social media presence, and consistent WHOIS data. No critical vulnerabilities or suspicious activities were detected.

M

McRent

mcrent.nl

52

McRent is a leading camper rental company operating primarily in Europe and New Zealand, offering a wide range of motorhomes and campervans with inclusive services such as insurance, unlimited kilometers, and professional maintenance. The company targets vacationers seeking freedom and comfort in their travel experience. The website is well-designed, mobile-optimized, and provides comprehensive business and contact information, including multiple language options and country-specific sites. Technically, the site uses modern frameworks like React, integrates Mapbox for mapping, and employs Usercentrics for cookie consent management. Security posture is solid with HTTPS and no exposed sensitive data, although explicit security policies and incident response details are absent. Overall, the site reflects a mature digital presence with good privacy compliance and trustworthy business credentials.

R

Rudolf Desenský

psycholog-psu.com

45

The website psycholog-psu.com represents Rudolf Desenský, a Czech dog psychologist specializing in dog behavior, training, and holistic therapies. The business operates primarily as a small-scale service and educational provider, offering personal consultations, socialization events, and publishing books. The website content is rich and well-structured, targeting dog owners and enthusiasts in the Czech Republic. The business has a credible market position supported by media presence and certifications. Technically, the site is built using Incomedia WebSite X5 Pro and hosted by WEDOS Internet, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and professional but would benefit from enhanced security and compliance measures.

B

Baron

baron.cz

60

Baron.cz is a Czech Republic based e-commerce website specializing in natural pharmacy products and pet supplies for dogs and cats, as well as health-related products for humans. The site positions itself as a niche provider focused on natural health and wellness, targeting pet owners and health-conscious individuals. The business model revolves around online retail with an affiliate program to expand reach. The website is professionally designed with clear navigation and comprehensive content in Czech language, supporting a good user experience and trustworthiness. Technically, the site is built on the Shoptet e-commerce platform, integrating modern analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook SDK. The site is mobile optimized and accessible, though some libraries like jQuery are outdated. Security posture is generally good with HTTPS enforced and secure forms, but lacks explicit security policies and incident response contacts. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. WHOIS data is missing, which slightly reduces trust but the website content and contact information appear legitimate. Overall, the site is a well-functioning, niche e-commerce platform with room for security and technical improvements.

POHŘEBNÍ ÚSTAV PRO MALÁ ZVÍŘATA PET - PIETA is a specialized service provider in the Czech Republic offering dignified end-of-life services for small animals, including euthanasia at home, cremation, burial, and veterinary autopsy. Established in 2011, the company has over 15 years of experience and operates with a focus on compassionate care and client support. Their services are well described and targeted at pet owners seeking respectful farewells for their pets. Technically, the website is built on WordPress using the GeneratePress theme and standard web technologies such as jQuery, HTML5, and CSS3. The site is hosted likely by Wedos, a Czech hosting provider, and shows moderate performance with good mobile optimization. However, the site lacks advanced SEO and accessibility features and does not implement security headers, which could be improved. From a security perspective, the website uses HTTPS and does not expose sensitive data or vulnerable libraries. However, the absence of security headers and privacy/cookie policies indicates gaps in compliance and security best practices. No incident response or vulnerability disclosure information is provided, which could be a risk in case of security incidents. Overall, the website is professional, trustworthy, and relevant to its business domain but would benefit from enhanced privacy compliance, security hardening, and transparency measures to improve user trust and regulatory adherence.

T

PRAGMATIC4D: Game Populer 1x Spin Auto Maxwin Menggelegar

trendyresumes.com

54

The website appears to be an online gaming platform branded as Pragmatic4d, targeting Indonesian users with games promising quick wins. The site leverages multiple Alibaba and Lazada related scripts and CDNs, indicating some integration with these platforms or usage of their infrastructure. However, the site lacks fundamental trust and compliance elements such as privacy policies, cookie consent mechanisms, terms of service, and contact information. Technically, the site uses modern JavaScript libraries and fonts but lacks visible HTTPS enforcement and security headers, which weakens its security posture. The WHOIS data shows a domain registered in 2021 with a stable registration and no privacy protection, consistent with the business type. Overall, the site presents a questionable compliance and security posture with limited business credibility.

ТОВ “1+1 Internet” operates as a content distributor and digital advertising provider primarily serving the Ukrainian media market. The company distributes a portfolio of Ukrainian and international TV channels and offers digital advertising campaigns on prominent Ukrainian media websites. The business targets advertisers and media partners seeking to leverage digital platforms for brand promotion and content distribution. The website presents a professional image with clear business descriptions and publicly available financial reports, indicating transparency and operational legitimacy. Technically, the website uses standard web technologies including HTML5, CSS, and JavaScript, with a moderate performance profile and good mobile optimization. However, it lacks advanced technical features such as security headers, analytics integration, and comprehensive SEO metadata. The absence of privacy and cookie policies and contact information limits the site's compliance posture and user trust. From a security perspective, the site is accessible without WAF or blocking mechanisms but shows limited security best practices. No HTTPS or SSL configuration details were provided, and no security policies or incident response contacts are published. This suggests a need for improved security governance and compliance measures to protect user data and enhance trust. Overall, the website is functional and professional but would benefit from enhanced security, privacy compliance, and user engagement features to strengthen its market position and reduce operational risks.

O

Holidays in Ötztal | Ötztal | oetztal.com

oetztal.xyz

71

The website www.oetztal.com serves as a tourism and holiday information portal for the Ötztal region, offering a variety of activity options for summer and winter visitors. The site targets tourists and holidaymakers interested in exploring the region, providing content focused on travel planning and local attractions. The business model appears to be centered on tourism promotion and information dissemination, with partnerships to related regional tourism sites. Technically, the website employs modern JavaScript libraries and tools such as Google Tag Manager and Cookiebot for analytics and cookie compliance, indicating a moderate level of digital maturity. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS usage and cookie consent mechanisms, but lacks visible security headers and published security policies. The absence of WHOIS data for the domain reduces trustworthiness and raises questions about domain registration transparency. Overall, the site is safe for general audiences and does not contain adult or questionable content.

H

Hotel & Therme AQUA DOME

aqua-dome.at

44

Hotel & Therme AQUA DOME is a premium alpine spa hotel located in the Ötztal valley, Tyrol, Austria. It offers a comprehensive wellness experience including thermal baths, spa treatments, fitness facilities, and culinary services. The business targets wellness tourists, couples, families, and singles seeking relaxation and alpine experiences. The website is professionally designed, mobile optimized, and provides clear navigation and booking options. Technically, it uses modern frameworks such as Next.js and React, with integrated consent management and advertising pixels. Security posture is good with HTTPS and consent mechanisms, though explicit security headers and incident response policies are not publicly documented. The domain WHOIS data is unavailable, likely due to privacy protection, but the website's trust indicators and certifications support its legitimacy. Overall, the site demonstrates a mature digital presence aligned with hospitality industry standards.

H

Hotel Restaurant Grauer Bär

grauer-baer.com

50

Hotel Restaurant Grauer Bär is a small hospitality business located in Sölden, Austria, offering alpine hotel accommodation and regional culinary experiences. The website is professionally designed using TYPO3 CMS, featuring multilingual support and integrated booking and wellness services. The technical infrastructure includes modern JavaScript libraries and Google Analytics for visitor tracking. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response policies are absent. The domain WHOIS data is unavailable, which raises some concerns about registration transparency but the website content and contact information support business legitimacy. Overall, the site provides a good user experience with clear navigation and relevant content for tourists seeking alpine hospitality.

THE LOST WEB is a professional programmers community and outsource team offering custom web and mobile development services, specializing in PHP, Java, and related technologies. The company emphasizes delivering cost-efficient, memorable, and effective products tailored to client needs. Their service portfolio includes CMS, e-commerce, auction systems, social networks, and mobile Android applications. The website content is accessible and professionally presented but lacks modern privacy and security disclosures. The domain WHOIS data is missing, raising concerns about domain registration legitimacy despite the website's claim of operation since 1999. Technically, the site uses a proprietary CMS and standard web technologies with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published policies. Advertising and analytics are implemented via Google Adsense and Google Analytics, with moderate user tracking. Overall, the site is functional and professional but requires improvements in compliance, security transparency, and domain legitimacy verification.

S

SIA Selected agency

caballero.lv

60

Caballero is a Latvia-based digital agency specializing in customized web solutions for businesses and the public sector. Their services include website development, e-commerce projects, UX/UI design, branding, and IT consultations. The company has a strong portfolio including government and corporate clients, positioning itself as a trusted partner in the digital transformation space. Technically, the website is built on WordPress with modern frameworks and integrates Google Analytics and Cookiebot for analytics and privacy compliance. Security posture is solid with HTTPS enforced, cookie consent management, and reCAPTCHA for bot protection, though explicit incident response and security policies are not published. Overall, the website is professional, well-structured, and compliant with GDPR requirements, reflecting a mature digital presence.

M

McRent

mcrent.fi

57

McRent is a leading motorhome rental company operating primarily in Europe and New Zealand, with a strong presence in Finland as evidenced by the localized website. The company offers a wide range of motorhomes, including vans, campervans, and integrated models, targeting leisure travelers seeking flexible and comfortable travel options. Their business model focuses on direct rentals supported by a comprehensive online booking system and extensive customer support. Technically, the website is built on modern frameworks such as React, uses Mapbox for mapping, and integrates cookie consent management and analytics tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site projects professionalism and trustworthiness, supported by consistent WHOIS data and transparent contact information.

Ö

Ötztal Tourismus

oetztaltourismus.com

67

Ötztal Tourismus operates a B2B information and service portal focused on tourism in the Ötztal region of Austria. The website serves as a resource for local accommodation providers and tourism professionals, offering marketing campaign details, product development updates, and service ordering options. The organization positions itself as a regional tourism authority with a medium-sized operational scale. Technically, the website employs modern JavaScript libraries and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though explicit security policies and incident response information are not publicly available. The absence of WHOIS data for the domain reduces confidence in domain registration legitimacy, but the website content and technical setup indicate a professional and trustworthy entity. Strategic recommendations include enhancing security headers, publishing security policies, and improving contact information visibility.

G

Gurgl Carat

gurgl-carat.com

70

Gurgl Carat is a professional event and congress venue located in the Ötztal/Tirol region of Austria, catering to events with up to 500 attendees. The website presents a modern and well-structured digital presence, utilizing advanced technologies such as Google Tag Manager, Cookiebot for cookie consent management, and interactive JavaScript libraries. The site is mobile optimized and provides a good user experience with clear navigation and relevant content focused on event hosting services. However, the absence of publicly accessible privacy policy and terms of service pages, as well as missing contact information, limits full transparency and user trust. The security posture is generally good with HTTPS enforced and cookie consent implemented, but lacks some security headers and vulnerability disclosure mechanisms. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy and should be further investigated. Overall, the website is functional and professional but would benefit from enhanced compliance documentation and security best practices.

O

Holidays in Ötztal | Ötztal | oetztal.com

oetztal.com

73

The website www.oetztal.com serves as a regional tourism portal for the Ötztal valley in Austria, offering comprehensive information about holiday options, activities, and seasonal events. It targets tourists and holidaymakers interested in exploring the region, providing a user-friendly platform to plan vacations. The site leverages modern web technologies including JavaScript frameworks and third-party services such as Google Tag Manager and Cookiebot for analytics and privacy compliance. Despite the lack of WHOIS data, the website presents a professional and trustworthy front with good content quality and user experience. Security posture is moderate with HTTPS enforced and cookie consent implemented, though improvements in security headers and explicit privacy policies are recommended. Overall, the site is suitable for general audiences and maintains a good balance between functionality and compliance.

1

1+1 Media

1plus1.international

52

The website distribution.1plus1.international represents 1+1 International, the international broadcasting arm of 1+1 Media, a leading Ukrainian media company. The site offers information about their TV content, including popular series and news programming, targeting Ukrainian audiences both domestically and abroad. The business model centers on content distribution via satellite, cable, IPTV, and online platforms, positioning itself as a major player in Ukrainian prime-time television. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript with jQuery, and HLS.js for video streaming. It integrates Google Tag Manager and Google reCAPTCHA for analytics and spam protection respectively. The site is mobile optimized with good SEO practices but lacks some accessibility features and security headers. From a security perspective, the site uses HTTPS and implements reCAPTCHA on its contact form, indicating a baseline security posture. However, it lacks visible security headers and published privacy or cookie policies, which are important for compliance and trust. WHOIS data is unavailable due to privacy or query failure, but the domain and content appear consistent with a legitimate media entity. Overall, the website is professional and trustworthy with good content quality and business credibility. Key recommendations include publishing privacy and cookie policies, adding security headers, and providing explicit security and incident response information to enhance compliance and user trust.

Т

Телевізійна служба новин

tsn.ua

66

ТСН.ua is a leading Ukrainian online news media platform operated by the Телевізійна служба новин, part of the 1+1 Media Group. Founded in 1997, it provides comprehensive news coverage including politics, economy, sports, lifestyle, and exclusive video content. The website targets a broad general audience in Ukraine and offers content in multiple languages including Ukrainian, Russian, and English. The business model centers on media publishing with revenue streams from advertising and partnerships. The site maintains a strong market position as a trusted news source in Ukraine.

S

Stingray Group Inc.

qello.com

63

Qello Concerts by Stingray is a mature and reputable streaming service specializing in full-length music concerts and documentaries. Owned by Stingray Group Inc., the platform offers a subscription-based model with a global reach, serving music enthusiasts with a vast catalog of content accessible on multiple devices. The website demonstrates a high level of digital maturity, leveraging modern web technologies such as Next.js and AWS infrastructure to deliver fast, responsive, and accessible user experiences. Privacy and compliance are well addressed with clear policies and consent mechanisms aligned with GDPR standards. Security posture is strong, with HTTPS enforced and domain protections in place, though DNSSEC is not enabled. Overall, the site presents a professional, trustworthy, and user-friendly platform with no critical security or compliance issues detected.

The website vezkukla.cz serves as an informational and cultural heritage platform dedicated to the Kukla coal mine headframe located in Oslavany, Czech Republic. It provides historical context, tourist information, and promotes the site as a cultural monument and interactive tourist destination. The site targets local visitors, tourists, and history enthusiasts interested in mining heritage. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and jQuery, hosted likely by a Czech provider REG-ZONER. The site includes Google Tag Manager for analytics but lacks advanced CMS or frameworks. Security posture is moderate with HTTPS usage inferred but no visible security headers or published security policies. Privacy and cookie policies are absent, indicating compliance gaps. Contact information is minimal, with no emails or phone numbers explicitly provided. Overall, the site is functional and informative but would benefit from improved privacy compliance and security hardening.

M

Mgr. Lenka Páleníková

yoga-lenka.cz

38

The website www.yoga-lenka.cz represents a small, local yoga instruction business operated by Mgr. Lenka Páleníková, offering personalized yoga lessons, workshops, and wellness retreats primarily in the Brno region of the Czech Republic. The business model focuses on direct client engagement through individual and group sessions, supplemented by gift vouchers and event offerings. The site is built on the Webnode CMS platform and incorporates Google Analytics for visitor tracking. The technical infrastructure is moderate, with basic mobile optimization and standard web technologies, but lacks advanced security headers and comprehensive privacy compliance features. Security posture is adequate with HTTPS enabled, but could be improved by implementing additional security headers and privacy policies. The absence of WHOIS data limits domain trust verification, though the website content and presentation suggest a legitimate small business. Overall, the site provides a professional user experience with clear navigation and relevant content for its target audience.

R

Rīgas Tehniskās universitātes Liepājas Jūrniecības koledža

ljk.lv

52

Rīgas Tehniskās universitātes Liepājas Jūrniecības koledža (RTU LJK) is a specialized educational institution in Latvia offering professional secondary and short-cycle higher education programs focused on maritime professions such as ship captain, ship mechanic, and logistics specialist. The institution is affiliated with Riga Technical University and provides modern maritime education aligned with industry requirements, including practical training and Erasmus+ exchange programs. The website is well-structured, professionally designed, and provides comprehensive information for prospective students and stakeholders. Technically, the site uses modern JavaScript frameworks and integrates Google Tag Manager and Facebook SDK for analytics and marketing. Security posture is strong with HTTPS, security headers, and CSRF protections, though formal security policies and incident response contacts are not publicly disclosed. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Overall, the website reflects a credible and trustworthy educational entity with a moderate to high digital maturity level.

G

Global Specialty Lens Symposium

gslsymposium.com

66

Global Specialty Lens Symposium (GSLS) is a well-established professional event organizer specializing in contact lens education and networking. The website presents a clear, professional image with relevant event information targeting eye care professionals. The technical infrastructure leverages modern web technologies and analytics tools, hosted on a reliable CDN with domain registration dating back to 2008, indicating maturity and stability. Security posture is generally good with HTTPS enforced and domain registrar locks, though improvements are recommended in DNS security and HTTP security headers. Privacy compliance is partially met with visible privacy and terms pages but lacks an explicit cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, serving its niche audience effectively.